VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 3, 2006· Updated Jun 16, 2026

CVE-2006-5115

CVE-2006-5115

Description

Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the engine parameter, as demonstrated by uploading a file containing PHP code with an image/jpeg content type, and then referencing this file through the engine parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Kgb Project/Kgb2 versions
    cpe:2.3:a:kgb:kgb:1.87:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:kgb:kgb:1.87:*:*:*:*:*:*:*
    • (no CPE)range: =1.87

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.